DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
2d02656adbd36784d7c12f0331cbfad1_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d02656adbd36784d7c12f0331cbfad1_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2d02656adbd36784d7c12f0331cbfad1_JaffaCakes118
Size
171KB
MD5
2d02656adbd36784d7c12f0331cbfad1
SHA1
e0ef09c7c67e315b52c1c288ca1ba5a893800680
SHA256
5f4c40941d117e1ab12c927d3a730b3fb28ba2c1823e0e56d982159c9d94e06f
SHA512
41dd37b588ffcf5ae8dceef89efaccd88024af360b349ffad99f5bec71fc734c615e60a040f880432b35fec3e6b64e31b4095bb3c215286a40dd4fbb7a1865f5
SSDEEP
3072:cEHvQmAl7zL5m04Hov8jqSbGDWUczFtajTx5VXpH5v5outIjQQzcA:cEbWjnJCajTZpH95oSpA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d02656adbd36784d7c12f0331cbfad1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE